This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
File:                     pmnxwhNwxE39EOKvaIyMTg6hKVU.mft (raw, json)
Hash identifier:          MTL/lgJP+KFaeGt7bpN2MMNc8/2Kiu7USZx15VQp2Nk=
Subject key identifier:   2E:F4:68:AE:C5:DC:89:76:8F:10:C8:87:1C:87:75:4C:B6:C0:DE:51
Authority key identifier: A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
Certificate issuer:       /CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Certificate serial:       019C4359143E79A4FE2CA87F59C9C9BB745D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
Manifest number:          1059
Signing time:             Mon 09 Feb 2026 17:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:37 +0000
Files and hashes:         1: pmnxwhNwxE39EOKvaIyMTg6hKVU.crl (hash: dD1w9/DW3bgFZOHDHKEXnAo8I3ukhDscfC0qAcNac+I=)
                          2: xHv2_HdEJG5Cfvg9tYmqVThQtwc.roa (hash: Nxypi5IV+neWqZvzXksjBejqnOVHDrNcZpixogm0gqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:14:3e:79:a4:fe:2c:a8:7f:59:c9:c9:bb:74:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
        Validity
            Not Before: Feb  9 17:00:37 2026 GMT
            Not After : Feb 10 17:00:37 2026 GMT
        Subject: CN=2ef468aec5dc89768f10c8871c87754cb6c0de51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:46:f3:d7:de:b4:a1:b1:ad:95:c0:c3:11:
                    5c:23:e4:4e:78:b7:d7:30:3f:03:94:fc:a3:c2:f4:
                    33:b9:22:1c:76:1b:f9:17:f5:2a:eb:77:82:35:80:
                    46:dc:82:7b:f4:d3:8c:ad:41:34:79:19:4e:f1:00:
                    06:5e:5b:ee:99:4b:ed:83:d4:2e:4f:86:96:a3:57:
                    e7:0c:fc:4a:04:9f:48:ad:5d:b4:11:0c:e3:66:de:
                    b5:cd:00:79:8f:2a:47:bb:c8:e8:94:75:1f:c2:6f:
                    6a:40:4c:a8:2a:eb:43:80:73:ef:7b:06:3b:c4:64:
                    11:04:14:1e:bc:7f:75:e3:17:b7:60:8d:74:68:91:
                    92:34:5c:54:9e:7e:ae:0d:ff:c1:0b:70:6a:7b:87:
                    4f:f7:3b:a8:3c:e5:04:3e:e0:ce:94:64:d1:85:8d:
                    2a:1c:a9:25:0b:af:e8:e5:31:a3:93:60:a6:2b:23:
                    92:51:47:ac:33:88:72:ec:28:a5:7d:fc:d5:4a:6b:
                    c3:02:f6:15:f5:08:7a:0f:58:09:8d:73:f6:23:17:
                    f2:51:31:43:77:f2:ac:65:1f:4e:06:fc:76:0e:15:
                    a7:0b:f8:8d:e3:40:09:c9:ff:61:63:71:29:f0:2e:
                    64:2d:80:b5:50:e6:a2:ae:5f:73:31:8b:60:da:ae:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F4:68:AE:C5:DC:89:76:8F:10:C8:87:1C:87:75:4C:B6:C0:DE:51
            X509v3 Authority Key Identifier:
                keyid:A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5a:50:2e:58:05:ab:e8:21:ba:04:87:63:c7:51:df:34:8b:
         92:83:1c:79:8c:f4:cb:bb:14:a3:0f:a5:29:9a:eb:b9:ed:2b:
         40:6a:aa:36:29:5d:21:a1:1e:1d:de:7a:c9:fd:86:62:b8:22:
         d8:c2:cd:e4:40:a7:96:ce:47:fb:30:a1:39:1e:48:cc:e6:5d:
         5e:7d:86:fe:70:a5:40:e1:5c:10:b1:e5:ac:3e:a4:66:01:2e:
         26:bb:59:92:a1:be:fc:da:36:ca:9e:3b:82:ef:18:85:6a:3d:
         cc:fa:9a:18:f3:ec:92:b3:fe:1d:ad:a4:49:d2:47:a5:9c:e3:
         48:50:74:5c:c8:4b:4a:56:f2:7f:16:18:b0:b0:52:22:72:93:
         fd:9f:46:ab:1c:7d:d1:8b:cd:29:06:5c:34:84:ae:9c:93:f1:
         c1:14:24:f4:24:6a:0e:bf:4a:ef:12:51:fe:0a:b1:e5:51:b4:
         da:0e:d8:ac:a2:8e:4f:5b:94:f3:19:00:1c:65:99:2d:aa:f6:
         bd:52:35:04:2d:23:96:ad:e3:b1:1e:87:84:a8:d0:b0:fc:d5:
         a2:80:68:d5:c6:0c:4f:87:83:7e:fb:5a:05:2b:e9:c3:89:fd:
         bf:71:54:cf:a0:94:54:88:ea:9b:46:4c:cf:ef:cf:d2:f1:cc:
         a5:49:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:11 2026 by rpki-client